@mirabilos In fact it scans all networks on L2, finds the one any member of the target MAC array is associated with, assumes the BSSID of the AP, sends deauth packets to the client (glasses), which it automatically abides as a function of the 802.11 spec built-in. It does this in a loop. With more NICs to put in Monitor mode, you have effective detect and deauth 'threads' in parallel.